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The "about" URI Scheme 


Abstract 


This document describes the "about" URI scheme, which is widely used 
by Web browsers and some other applications to designate access to 
their internal resources, such as settings, application information, 
hidden built-in functionality, and so on. 


Status of This Memo 


This document is not an Internet Standards Track specification; it is 
published for informational purposes. 


This document is a product of the Internet Engineering Task Force 


(IETF). It represents the consensus of the IETF community. It has 
received public review and has been approved for publication by the 
Internet Engineering Steering Group (IESG). Not all documents 


approved by the IESG are a candidate for any level of Internet 
Standard; see Section 2 of RFC 5741. 


Information about the current status of this document, any errata, 
and how to provide feedback on it may be obtained at 
http://www.rfc-editor.org/info/rfc6694. 


Copyright Notice 


Copyright (c) 2012 IETF Trust and the persons identified as the 
document authors. All rights reserved. 


This document is subject to BCP 78 and the IETF Trust’s Legal 
Provisions Relating to IETF Documents 
(http://trustee.ietf.org/license-info) in effect on the date of 
publication of this document. Please review these documents 
carefully, as they describe your rights and restrictions with respect 
to this document. Code Components extracted from this document must 
include Simplified BSD License text as described in Section 4.e of 
the Trust Legal Provisions and are provided without warranty as 
described in the Simplified BSD License. 
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1. Introduction 


This document describes the "about" Uniform Resource Identifier (URI) 
scheme. The "about" URI scheme is currently widely used by Web 
browsers to designate access to their internal resources, such as 
settings, application information, and so-called "Easter eggs" (i.e., 
a hidden feature or joke in an application). 


2. URI Scheme Specification 
2.1. URI Scheme Syntax 


The "about" URI syntactically conforms to the <about-uri> rule below, 
expressed using the Augmented Backus-Naur Form (ABNF) [RFC5234]: 


about-uri = "about:" about-token [ about-query ] [ about-fragment ] 
about-token = *pchar 

about-query = "?" query 

about-fragment = "#" fragment 

pchar = <as specified in RFC 3986, Appendix A> 

query = <as specified in RFC 3986, Appendix A> 

fragment = <as specified in RFC 3986, Appendix A> 
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.2. URI Scheme Semantics 


The resource that is referenced by a particular "about" URI is 
denoted by the <about-token> part of the URI. It is not a 
hierarchical element for a naming authority. The <about-query> part 
specifies additional information about its handling and/or the 
information that should be returned by the resource referenced by 
the URI. 


It is impossible to specify a binding between all the possible tokens 
and the semantics of "about" URIs that would contain such tokens. 
Therefore, the resource referenced by the URI is generally considered 
to be specific to a Web browser implementation. 


.2.1. Well-Known "about" URIs 


Some <about-token>s have been reserved, as the behavior of the 
resource that is referenced is well-known (well-known tokens). 


A well-known "about" URI is a URI that has a well-known token as its 
<about-token> part. It is recommended that such URIs be handled in 
accordance with the specification referenced in the "about" URI 
Tokens registry (see Section 5.2). 


Well-known "about" URIs are intended to be registered when there is a 
need to codify the behavior of a particular <about-token>. 


.3. Encoding Considerations 


"about" URIs are subject to encoding rules as defined in RFC 3986 
[RFC3986]. 


"about:blank" 
This document defines one well-known token: "blank". The 


"about:blank" URI refers to a resource represented in the browser by 
a blank page. 


Security Considerations 


Security considerations for URIs are discussed in Section 7 of 

RFC 3986 [RFC3986]. However, most of those provisions do not apply 
to the "about" URI scheme, as they are mainly scoped to schemes used 
in the Internet. 
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"about" URIS can sometimes refer to sensitive information, such as 
user passwords stored in a cache, or parameters that, if changed, 
could affect a user’s data. The application therefore needs to 
ensure that the user’s data is secured and no threats are imposed by 
"about" URIs. 
5. IANA Considerations 
5.1. URI Scheme Registration 
The "about" URI scheme has been registered in the "Permanent URI 
Schemes" registry. The information below is provided according to 
the guidelines from RFC 4395 [RFC4395]: 
URI scheme name: about 
Status: Permanent 
URI scheme syntax: See Section 2.1 of RFC 6694. 
URI scheme semantics: See Section 2.2 of RFC 6694. 


URI scheme encoding considerations: See Section 2.3 of RFC 6694. 


Applications that use the scheme: "about" URIs are predominantly 
used by Web browsers. 


Security considerations: See Section 4 of RFC 6694. 


Contact: IETF Applications Area Directors 
<app-ads@tools.ietf.org> 


Author/Change controller: IESG <iesg@ietf.org> (on behalf of the 
IETF) 


References: See Section 6 of RFC 6694. 
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5.2. A Registry for Well-Known Tokens 
This document creates the ' "about" URI Tokens’ registry. 


The registry entries consist of three fields: Token, Description, and 


Reference. The Token field has to conform to <about-token> 

production as defined in Section 2.1. The initial assignment is as 

follows: 

RSS a al Pes a SSS So eS See See SS Posse RT + 

| Token | Description | Reference | 

Fa 2+=== a do 22 2 > + 

| blank | The about:blank URI references a | RFC 6694 

| | blank page. | | 

Fano Snn E E T N SSecsa P=253523==8=5S + 
5.2.1. Registration Procedure 


The registration policy for this registry is "First Come First 
Served", as described in RFC 5226 [RFC5226]. The registrant of the 
token should provide the information mentioned in the following 
registration template: 


o Registered token: The desired well-known token to be used in 
"about" URIs. 


o Intended usage: A short description of how "about" URIs with the 
registered token are handled, including information about the 
referenced resource. 


o Contact/change controller: Person (including contact information) 
authorized to change this registration. 


o Specification: A stable reference to a document that specifies 
the registered "about" URI. The question of interoperability does 
not arise. The key motivation is to have a reference to a 
specification documenting well-known behavior of the "about" URI 
in Web browsers. As a rule of thumb, if the behavior is common to 
two or more Web browser implementations, it can be considered 
well-known. An existing assignment may be duplicated if the 
registered token is used in more than one Web browser 
implementation. 
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The following is a template for the "blank" token: 
o Registered token: blank 
o Intended usage: The about:blank URI references a blank page. 


o Contact/change controller: IESG <iesglietf.org> (on behalf of the 
IETF). 


o Specification: RFC 6694 
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